Eight-Year Old Microsoft Zero-Day Continues to be Exploited

A vulnerability that allows threat actors to execute code remotely using .lnk files, also known as shell link files, has been exploited since 2017. This vulnerability has not been patched by Microsoft nor assigned a CVE yet, therefore still qualifying…